Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
File: BFC15EB0A87111EFBB7C2F32C4F9AE02.roa (raw, json)
Hash identifier: LY8ylSpdVHf0UalT6sncDU1hq9WV7iqZmpbhVEoma3U=
Subject key identifier: 06:E3:64:72:E6:D3:EE:5E:80:93:BD:6D:0A:08:6A:97:97:19:2B:BC
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 4D38
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
Signing time: Thu 28 Aug 2025 14:54:13 +0000
ROA not before: Thu 28 Aug 2025 14:54:12 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140810
IP address blocks: 103.77.172.0/23 maxlen: 23
103.77.214.0/23 maxlen: 23
103.77.240.0/23 maxlen: 23
103.77.246.0/23 maxlen: 23
103.78.0.0/23 maxlen: 23
103.116.38.0/23 maxlen: 23
103.141.140.0/23 maxlen: 23
103.155.216.0/24 maxlen: 24
103.176.108.0/23 maxlen: 24
103.178.234.0/23 maxlen: 23
103.213.218.0/23 maxlen: 23
103.214.8.0/22 maxlen: 22
103.238.234.0/23 maxlen: 23
103.252.136.0/23 maxlen: 23
223.130.10.0/23 maxlen: 23
2001:df4:c340::/48 maxlen: 48
2001:df4:d880::/48 maxlen: 48
2400:ece0::/48 maxlen: 48
2401:1960::/48 maxlen: 48
2401:2420::/48 maxlen: 48
2401:3660::/48 maxlen: 48
2401:36a0::/48 maxlen: 48
2401:3760::/48 maxlen: 48
2401:37a0::/48 maxlen: 48
2401:3f20::/48 maxlen: 48
2401:45a0::/48 maxlen: 48
2405:19c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Sep 2025 16:20:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19768 (0x4d38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Validity
Not Before: Aug 28 14:54:12 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=68b06d94-a70a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:14:93:c4:7d:2a:ac:30:45:b6:2b:02:9d:
cc:83:2e:69:8a:95:8f:45:93:5d:f7:50:b4:5c:ae:
c6:0b:53:68:65:79:83:24:cc:f5:eb:bb:59:1a:c3:
7c:03:22:4e:d7:aa:a7:b7:c2:8e:66:53:49:99:8a:
55:8a:d7:ec:42:52:ac:63:c1:67:66:52:52:47:99:
85:aa:39:c0:02:4a:3a:88:fd:aa:44:e8:79:88:1a:
77:b3:f8:cb:8f:d0:1b:00:5e:81:48:48:49:b7:ce:
1b:ba:58:45:bf:17:ea:7e:1a:e2:a9:4c:e1:1e:68:
28:5b:69:c2:86:52:fa:0d:da:47:a0:42:0c:0f:58:
04:a5:2f:b4:50:4d:cb:5d:ae:fa:01:de:8e:52:0d:
ee:02:82:22:71:e8:c4:1f:df:9c:0a:95:95:23:28:
d0:dd:cf:ad:d7:80:f6:2c:e9:df:76:d2:a4:6a:c1:
ab:03:49:9a:3a:b0:45:77:da:53:67:2a:65:fd:28:
88:2d:2e:8b:5b:b7:05:b0:c0:88:9b:3d:33:57:b4:
0e:73:31:ba:c7:3f:5e:9d:fd:e3:16:ec:e4:ec:3f:
93:75:74:e6:f9:43:d4:66:5c:7f:64:a7:f2:60:7f:
b3:17:db:a6:ca:d4:8e:ef:0b:5c:e1:97:e5:76:52:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:64:72:E6:D3:EE:5E:80:93:BD:6D:0A:08:6A:97:97:19:2B:BC
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BFC15EB0A87111EFBB7C2F32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.77.172.0/23
103.77.214.0/23
103.77.240.0/23
103.77.246.0/23
103.78.0.0/23
103.116.38.0/23
103.141.140.0/23
103.155.216.0/24
103.176.108.0/23
103.178.234.0/23
103.213.218.0/23
103.214.8.0/22
103.238.234.0/23
103.252.136.0/23
223.130.10.0/23
IPv6:
2001:df4:c340::/48
2001:df4:d880::/48
2400:ece0::/48
2401:1960::/48
2401:2420::/48
2401:3660::/48
2401:36a0::/48
2401:3760::/48
2401:37a0::/48
2401:3f20::/48
2401:45a0::/48
2405:19c0::/32
Signature Algorithm: sha256WithRSAEncryption
62:ad:65:70:14:72:5f:29:be:53:5b:d9:35:20:03:1b:2d:ce:
db:b9:4c:c7:13:ba:0a:d0:ca:74:cb:d3:58:ae:29:dd:1a:9d:
66:5d:52:56:b0:fe:2e:9c:26:50:4c:43:16:49:12:e0:88:db:
1e:a0:30:35:62:02:a2:76:70:33:16:e5:96:c5:79:42:42:5c:
d6:d0:cf:d5:72:e3:5d:39:9b:40:be:22:bb:17:fa:d2:bd:95:
07:d8:30:c7:e0:59:6f:2c:82:8a:f6:01:b1:5c:9a:f1:6c:bb:
ef:d3:24:4d:80:58:6b:76:6d:71:55:53:fc:6f:6d:ce:55:ce:
12:0e:8e:11:2f:db:5f:89:c5:cf:8d:e9:1c:e9:3d:07:09:d7:
26:95:12:06:44:9d:6b:0d:a9:5b:7d:42:08:8e:6b:40:64:04:
70:d0:1c:60:95:2d:dd:ec:ac:a9:c4:39:fe:18:3e:d3:a7:08:
27:f0:02:64:57:a9:38:a6:85:7b:08:56:e4:f5:c1:88:46:cb:
45:4d:c3:79:32:61:0e:a5:88:93:86:6b:9f:95:97:a6:c7:5b:
2a:31:0c:4b:d9:86:59:4b:d9:66:a7:0b:42:f8:75:78:20:f3:
49:8a:48:58:e6:54:03:a2:ff:a2:ee:7e:a7:70:bf:6f:cf:73:
ef:04:82:5c
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgICTTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NDEyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIwNmQ5NC1hNzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxzkUk8R9KqwwRbYrAp3Mgy5pipWPRZNd91C0XK7GC1NoZXmDJMz167tZGsN8
AyJO16qnt8KOZlNJmYpVitfsQlKsY8FnZlJSR5mFqjnAAko6iP2qROh5iBp3s/jL
j9AbAF6BSEhJt84bulhFvxfqfhriqUzhHmgoW2nChlL6DdpHoEIMD1gEpS+0UE3L
Xa76Ad6OUg3uAoIicejEH9+cCpWVIyjQ3c+t14D2LOnfdtKkasGrA0maOrBFd9pT
Zypl/SiILS6LW7cFsMCImz0zV7QOczG6xz9enf3jFuzk7D+TdXTm+UPUZlx/ZKfy
YH+zF9umytSO7wtc4ZfldlIx9QIDAQABo4IDXjCCA1owHQYDVR0OBBYEFAbjZHLm
0+5egJO9bQoIapeXGSu8MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQkZDMTVFQjBB
ODcxMTFFRkJCN0MyRjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgecGCCsGAQUFBwEHAQH/
BIHXMIHUMGAEAgABMFoDBAFnTawDBAFnTdYDBAFnTfADBAFnTfYDBAFnTgADBAFn
dCYDBAFnjYwDBABnm9gDBAFnsGwDBAFnsuoDBAFn1doDBAJn1ggDBAFn7uoDBAFn
/IgDBAHfggowcAQCAAIwagMHACABDfTDQAMHACABDfTYgAMHACQA7OAAAAMHACQB
GWAAAAMHACQBJCAAAAMHACQBNmAAAAMHACQBNqAAAAMHACQBN2AAAAMHACQBN6AA
AAMHACQBPyAAAAMHACQBRaAAAAMFACQFGcAwDQYJKoZIhvcNAQELBQADggEBAGKt
ZXAUcl8pvlNb2TUgAxstztu5TMcTugrQynTL01iuKd0anWZdUlaw/i6cJlBMQxZJ
EuCI2x6gMDViAqJ2cDMW5ZbFeUJCXNbQz9Vy4105m0C+IrsX+tK9lQfYMMfgWW8s
gor2AbFcmvFsu+/TJE2AWGt2bXFVU/xvbc5VzhIOjhEv21+Jxc+N6RzpPQcJ1yaV
EgZEnWsNqVt9QgiOa0BkBHDQHGCVLd3srKnEOf4YPtOnCCfwAmRXqTimhXsIVuT1
wYhGy0VNw3kyYQ6liJOGa5+Vl6bHWyoxDEvZhllL2WanC0L4dXgg80mKSFjmVAOi
/6Lufqdwv2/Pc+8Eglw=
-----END CERTIFICATE-----
Generated at Mon Sep 8 00:32:08 2025 by rpki-client